openSUSE-SU-2021:3804-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3804-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2021:3804-1
Related
Published
2021-11-25T12:47:43Z
Modified
2021-11-25T12:47:43Z
Summary
Security update for netcdf
Details

This update for netcdf fixes the following issues:

  • Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347, CVE-2021-31348, CVE-2021-31598 (bsc#1191856) Note:
    • CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
    • CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
References

Affected packages

openSUSE:Leap 15.3 / netcdf

Package

Name
netcdf
Purl
pkg:rpm/opensuse/netcdf&distro=openSUSE%20Leap%2015.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.6.1-5.7.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf-openmpi": "4.6.1-5.7.1",
            "libnetcdf13": "4.6.1-5.7.1",
            "libnetcdf13-openmpi": "4.6.1-5.7.1",
            "netcdf-openmpi-devel-static": "4.6.1-5.7.1",
            "netcdf-openmpi-devel-data": "4.6.1-5.7.1",
            "libnetcdf13-32bit": "4.6.1-5.7.1",
            "netcdf-openmpi-devel": "4.6.1-5.7.1",
            "libnetcdf13-openmpi-32bit": "4.6.1-5.7.1"
        }
    ]
}

openSUSE:Leap 15.3 / netcdf-openmpi

Package

Name
netcdf-openmpi
Purl
pkg:rpm/opensuse/netcdf-openmpi&distro=openSUSE%20Leap%2015.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.6.1-5.7.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf-openmpi": "4.6.1-5.7.1",
            "libnetcdf13": "4.6.1-5.7.1",
            "libnetcdf13-openmpi": "4.6.1-5.7.1",
            "netcdf-openmpi-devel-static": "4.6.1-5.7.1",
            "netcdf-openmpi-devel-data": "4.6.1-5.7.1",
            "libnetcdf13-32bit": "4.6.1-5.7.1",
            "netcdf-openmpi-devel": "4.6.1-5.7.1",
            "libnetcdf13-openmpi-32bit": "4.6.1-5.7.1"
        }
    ]
}